Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8928/728D69EAD95311EBBC684587C4F9AE02/5125A48CD95511EB82ED6687C4F9AE02.roa
File: 5125A48CD95511EB82ED6687C4F9AE02.roa (raw, json)
Hash identifier: t2hHckZ83ocGwHxEMrAG4X5uiGQZO40TK25MrkbrvTE=
Subject key identifier: F7:82:AF:A5:3A:7B:A7:B7:1A:71:C6:BF:26:14:7D:C3:C0:2F:12:F8
Certificate issuer: /CN=A91B8928/serialNumber=66DC8B7D5F9AFE785DD35A7C2915D51CB669CECB
Certificate serial: 0494
Authority key identifier: 66:DC:8B:7D:5F:9A:FE:78:5D:D3:5A:7C:29:15:D5:1C:B6:69:CE:CB
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtyLfV-a_nhd01p8KRXVHLZpzss.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91B8928/728D69EAD95311EBBC684587C4F9AE02/5125A48CD95511EB82ED6687C4F9AE02.roa
Signing time: Mon 01 Jan 2024 01:23:13 +0000
ROA not before: Mon 01 Jan 2024 01:23:13 +0000
ROA not after: Wed 01 May 2024 00:00:00 +0000
asID: 141350
IP address blocks: 103.157.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1172 (0x494)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91B8928/serialNumber=66DC8B7D5F9AFE785DD35A7C2915D51CB669CECB
Validity
Not Before: Jan 1 01:23:13 2024 GMT
Not After : May 1 00:00:00 2024 GMT
Subject: CN=65921401-9309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:99:63:00:20:af:52:67:b0:f5:8a:4d:85:
8a:ff:57:26:96:53:0c:8a:ec:18:e2:04:2d:93:56:
87:3a:14:aa:c0:ff:42:c3:da:84:df:fc:ab:20:8e:
86:8a:f9:85:70:27:fa:f0:66:fc:d7:a9:c9:f9:10:
e6:0c:1b:2a:af:9c:1c:4b:57:c9:21:bb:95:25:ea:
68:d4:2a:83:2e:65:b3:2d:39:19:f8:f7:67:ed:f7:
44:87:14:3b:b3:67:91:ea:dc:92:48:48:d7:3e:9e:
25:f2:f3:a6:bf:58:46:65:25:65:49:e1:66:25:b3:
71:26:4c:c0:a4:ba:7f:51:f3:b6:d9:07:04:62:48:
4b:6b:53:68:99:7a:41:ab:90:44:c6:40:60:a1:c6:
2a:c1:99:f3:f6:10:52:04:7a:b8:57:db:cd:2f:2d:
1d:65:f0:f6:1c:24:cb:1a:1e:b2:e2:d3:66:8d:c9:
01:6f:e4:25:a1:5b:6b:ce:54:22:b8:09:cb:0a:b0:
65:7a:24:8b:aa:15:5e:80:9a:f7:09:fe:df:49:68:
09:cb:3b:d1:07:2d:44:95:35:0c:59:d0:12:d9:cb:
81:d7:39:da:2f:e2:40:84:df:07:e8:c2:8b:80:d0:
b2:e5:61:55:47:22:72:05:d2:29:68:9e:31:d6:1f:
b7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:82:AF:A5:3A:7B:A7:B7:1A:71:C6:BF:26:14:7D:C3:C0:2F:12:F8
X509v3 Authority Key Identifier:
keyid:66:DC:8B:7D:5F:9A:FE:78:5D:D3:5A:7C:29:15:D5:1C:B6:69:CE:CB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91B8928/728D69EAD95311EBBC684587C4F9AE02/ZtyLfV-a_nhd01p8KRXVHLZpzss.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ZtyLfV-a_nhd01p8KRXVHLZpzss.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8928/728D69EAD95311EBBC684587C4F9AE02/5125A48CD95511EB82ED6687C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.157.101.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:a5:72:34:7d:ed:00:4c:58:ea:3c:86:89:8c:47:e3:ac:b8:
62:fb:51:68:25:82:c5:97:dd:37:df:20:14:43:5e:28:5a:3a:
57:56:0d:12:b4:2b:43:2c:25:20:15:c6:26:ea:82:df:0f:a3:
a1:fb:a4:36:d3:3e:a4:19:9d:4c:8e:25:c8:9c:b6:84:47:ab:
19:3f:e5:f8:cb:45:23:2c:28:de:21:be:9d:77:ad:b4:c2:70:
e7:eb:cd:e3:05:3b:b2:46:1d:10:8c:77:04:1d:4f:72:38:ab:
a8:9d:88:b9:de:18:f7:69:2e:2b:19:c6:85:6e:c0:fc:be:50:
f1:92:49:68:7f:46:6f:e6:4a:97:91:50:ab:51:fd:3a:08:59:
d6:5f:8a:58:17:7d:55:46:39:88:34:81:70:e5:83:67:76:19:
17:c4:02:f7:28:f6:1c:54:8a:32:85:bf:5b:eb:5a:35:52:d0:
58:1f:b5:fc:8f:87:fa:9b:08:dd:2c:50:1d:46:81:82:c1:17:
8d:d5:7a:68:55:2a:50:ba:69:aa:77:3f:11:46:7c:37:60:ca:
70:80:67:82:df:80:c3:06:e7:5f:a5:79:9b:63:5a:ec:fc:42:
4b:96:ba:4f:b1:56:46:09:76:26:8b:49:e8:b7:e3:ff:19:5a:
00:9f:8b:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:51:38 2024 by rpki-client on console-fra.rpki-client.org